Originally posted by another user
graf_chokolo says:
You must login or register to view this content.
Figured out how to disable HDD encryption permanently by patching HV
You must login or register to view this content.
Just theory for now, still needs testing
You must login or register to view this content. Will report back after i tested it.
Originally posted by another user
graf_chokolo says:
You must login or register to view this content.
Holy crap, guys
You must login or register to view this content. Patched HV at runtime, disabled HDD encryption, rebooted GameOS and GameOS started to format my HDD and i lost all data on my HDD
You must login or register to view this content. I guess because everything was encrypted and GameOS didn’t understand it because i disabled decryption, so it reformated HDD.
HV reversing is fun
You must login or register to view this content.
Originally posted by another user
graf_chokolo says:
You must login or register to view this content.
@Ornillo
The difference is that i do not use LV2 at all to decrypt/encrypt storage devices. Storage device encryption/decryption is done by HV and peripheral devices like ENCDEC or RBD. I’m trying to understand how the storage subsystem of HV works currently, it’s by far the most complex part of HV i have seen so far.
And recently i figured out that the VFLASH region, where Linux boot loader (otheros.bld) is stored, is still there on 3.41 firmware. I’m trying now to boot Linux bootloader from this region. OtherOs.self writes otheros.bld image to this VFLASH region and creates cekk_ext_os_area where several parameters are stored. On 3.15 firmware, when Linux was booted, the Linux System Manager (in HV process 9) loads Linux bootloader from the VFLASH region, decompresses it and boots it. The problem with 3.4.1 firmware is, that SONY removed Linux System Manager from HV process 9. It’s no problem for me to store Linux bootloader on this VFLASH partition. But there are 2 problems, first the VFLASH region where Linux is stored is 0×40000 bytes large, so there is not much place for Linux bootloader on VFLASH, so it should be compressed to make it smaller. Second problem is, i have to patch HV process, insert my code which loads it from VFLASH and decompresses Linux bootloader. And after that we could boot Linux from HDD and it would have GameOS rights, e.g. has access to Dispatcher Manager e.g.
or run isolated SPUs.
Originally posted by another user
graf_chokolo says:
You must login or register to view this content.
And more, HV has a nice feature to boot Linux bootloader with System Debugger
You must login or register to view this content. Too bad i don’t have a debugger for HV
You must login or register to view this content.
Originally posted by another user
graf_chokolo says:
You must login or register to view this content.
I dumped now both decrypted and encrypted sectors of UFS2. And the same plaintext is encrypted to the same ciphertext
You must login or register to view this content. Encryption is independent of sector position.